The Ipsec Research. Ipv6-based Security Protocols

Internet has entered a ubiquitous state. All the areas will be strongly dependent on computer networks, such as economic, cultural, military and social activities. Given the pace of development of Internet and a wide range of applications, the initial development of the IPv4 Internet Protocol has shown much shortcoming, it is difficult to meet the future development of the Internet. Therefore, the new Internet Protocol IPv6 was designed as a successor of IPv4.The new Internet Protocol IPv6 has an advantage of better security. IP layer security was achieved though IPSec and provided further protection of the whole network.This paper describes the development of next generation networks, the basic contents of IPv6, and focus on the security agreement IPSec. IPSec is a package agreement that can be seamlessly inserted into IP security. It can provide identical authentication, data integrity and confidentiality of the inspection mechanism, so that the data can be prevented to attacks. IPSec is optional for IPv4, and a certainly option for IPv6. IPSec can provide protection for any agreement that run above the IP layer, such as TCP, UDP and ICMP and so on. IPSec is easy to expand and the most comprehensive network security-case. This paper discusses AH and ESP in detail, also IPSec security system and other components of the strategy such as security, encryption and authentication algorithms, key management, etc. By experiments, described in detail IPv6 protocol installation and configuration of IPSec. Through the network sniffer detects the header of packages, and verify the security. Through the analysis of the experiment, found that the use of IPSec to achieve security is at the expense of network performance for the price, thus, further elaborated the theory of IPComp. Since IPSec packets of data encryption, TCP port number can not be access by firewall, this is the point of contradiction of IPSec and firewall. In this paper, a solution is putted forward to let the IPSec and firewall work together well to achieve the network security protection. Concluding part of paper was summarized that the experience and harvest, while noting a lot of deficiencies. Finally, gave the prospect of IPv6 and IPSec. IPSec is the core of IPv6; IPSec on the next generation of network security is of great significance.